#!

###########################
# WebFilter Settings Profile
###########################
#
# Settings provide the config for "https scanning without deep scan"
#
config webfilter profile
edit mydomain1-default.local
set comment "Webfilter default profile mydomain1.ch"
set inspection-mode proxy
set https-replacemsg disable
config web
set safe-search url     
set log-search enable 
end 
config ftgd-wf
set max-quota-timeout 300
set rate-image-urls  enable 
set rate-javascript-urls enable 
set rate-css-urls enable 
set rate-crl-urls enable 
end
set log-all-url enable 
set web-content-log enable  
set web-filter-activex-log enable  
set web-filter-command-block-log enable  
set web-filter-cookie-log enable 
set web-filter-applet-log enable 
set web-filter-jscript-log enable 
set web-filter-js-log enable 
set web-filter-vbs-log enable 
set web-filter-unknown-log enable 
set web-filter-referer-log enable 
set web-filter-cookie-removal-log enable 
set web-url-log enable 
set web-invalid-domain-log enable 
set web-ftgd-err-log enable 
set web-ftgd-quota-usage enable 
end
###########################
# WebFilter Settings Content Header
###########################
config webfilter content-header
edit 1
set comment "exempt from antivirus scanning"
config entries
edit "video\\/.*"
set action exempt
next
edit "audio\\/.*"
set action exempt
next
end
set name "exempt-antivirus-scanning"
next
end
config webfilter profile
edit mydomain1-default.local
config web
set content-header-list 1
end
next
end

###########################
# WebFilter Settings URL Filter
###########################
config webfilter urlfilter
edit 1
set name "mydomain1-default.local"
set comment "URL Filter default profile mydomain1.ch"
config entries
edit 1
set url "*.apple.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 2
set url "*.itunes.apple.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 3
set url "*.phobos.apple.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 4
set url "*.apple.com.edgesuite.net"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 5
set url "*.windowsupdate.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 6
set url "*.download.windowsupdate.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 7
set url "*.stats.update.microsoft.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 8
set url "*.msftncsi.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
edit 9
set url "*.microsoft.com"
set type wildcard
#set type simple
set action exempt
#set exempt av web-content activex-java-cookie dlp fortiguard range-block all
next
end
next
end
config webfilter profile
edit mydomain1-default.local
config web
set urlfilter-table 1
end
next
end